CyberzSOC

Applicability
← Back to CVE-2022-47629

CVE-2022-47629

CVSS 9.8 n/a

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2025-11-21
2 affected 335 fixed 4 not affected
OSV.dev (incl. GHSA)
precedence 80 · revised 2026-11-04
1 affected 1 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2025-04-16
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (344)

Product Status Versions Remediation Source
red_hat_enterprise_linux_6:libksba libksba as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: libksba out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_6:libksba-devel libksba-devel as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: libksba-devel out of support fix in another branch csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.i686 libksba-0:1.3.0-7.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.i686 vendor fix → libksba-0:1.3.0-7.el7_9.i686 (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.i686 libksba-0:1.3.0-7.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.i686 vendor fix → libksba-0:1.3.0-7.el7_9.i686 (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.i686 libksba-0:1.3.0-7.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.i686 vendor fix → libksba-0:1.3.0-7.el7_9.i686 (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.i686 libksba-0:1.3.0-7.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.i686 vendor fix → libksba-0:1.3.0-7.el7_9.i686 (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc libksba-0:1.3.0-7.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc vendor fix → libksba-0:1.3.0-7.el7_9.ppc (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc libksba-0:1.3.0-7.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc vendor fix → libksba-0:1.3.0-7.el7_9.ppc (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc libksba-0:1.3.0-7.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc vendor fix → libksba-0:1.3.0-7.el7_9.ppc (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc libksba-0:1.3.0-7.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc vendor fix → libksba-0:1.3.0-7.el7_9.ppc (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64 libksba-0:1.3.0-7.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64 vendor fix → libksba-0:1.3.0-7.el7_9.ppc64 (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64 libksba-0:1.3.0-7.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64 vendor fix → libksba-0:1.3.0-7.el7_9.ppc64 (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64 libksba-0:1.3.0-7.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64 vendor fix → libksba-0:1.3.0-7.el7_9.ppc64 (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64 libksba-0:1.3.0-7.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64 vendor fix → libksba-0:1.3.0-7.el7_9.ppc64 (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64le libksba-0:1.3.0-7.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64le vendor fix → libksba-0:1.3.0-7.el7_9.ppc64le (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64le libksba-0:1.3.0-7.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64le vendor fix → libksba-0:1.3.0-7.el7_9.ppc64le (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64le libksba-0:1.3.0-7.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64le vendor fix → libksba-0:1.3.0-7.el7_9.ppc64le (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.ppc64le libksba-0:1.3.0-7.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.ppc64le vendor fix → libksba-0:1.3.0-7.el7_9.ppc64le (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390 libksba-0:1.3.0-7.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390 vendor fix → libksba-0:1.3.0-7.el7_9.s390 (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390 libksba-0:1.3.0-7.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390 vendor fix → libksba-0:1.3.0-7.el7_9.s390 (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390 libksba-0:1.3.0-7.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390 vendor fix → libksba-0:1.3.0-7.el7_9.s390 (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390 libksba-0:1.3.0-7.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390 vendor fix → libksba-0:1.3.0-7.el7_9.s390 (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390x libksba-0:1.3.0-7.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390x vendor fix → libksba-0:1.3.0-7.el7_9.s390x (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390x libksba-0:1.3.0-7.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390x vendor fix → libksba-0:1.3.0-7.el7_9.s390x (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390x libksba-0:1.3.0-7.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390x vendor fix → libksba-0:1.3.0-7.el7_9.s390x (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.s390x libksba-0:1.3.0-7.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.s390x vendor fix → libksba-0:1.3.0-7.el7_9.s390x (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.src libksba-0:1.3.0-7.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.src vendor fix → libksba-0:1.3.0-7.el7_9.src (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.src libksba-0:1.3.0-7.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.src vendor fix → libksba-0:1.3.0-7.el7_9.src (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.src libksba-0:1.3.0-7.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.src vendor fix → libksba-0:1.3.0-7.el7_9.src (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.src libksba-0:1.3.0-7.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.src vendor fix → libksba-0:1.3.0-7.el7_9.src (RHSA-2023:0530) csaf_redhat
7Client-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.x86_64 libksba-0:1.3.0-7.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.x86_64 vendor fix → libksba-0:1.3.0-7.el7_9.x86_64 (RHSA-2023:0530) csaf_redhat
7ComputeNode-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.x86_64 libksba-0:1.3.0-7.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.x86_64 vendor fix → libksba-0:1.3.0-7.el7_9.x86_64 (RHSA-2023:0530) csaf_redhat
7Server-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.x86_64 libksba-0:1.3.0-7.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.x86_64 vendor fix → libksba-0:1.3.0-7.el7_9.x86_64 (RHSA-2023:0530) csaf_redhat
7Workstation-optional-7.9.Z:libksba-0:1.3.0-7.el7_9.x86_64 libksba-0:1.3.0-7.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7) fixed libksba-0:1.3.0-7.el7_9.x86_64 vendor fix → libksba-0:1.3.0-7.el7_9.x86_64 (RHSA-2023:0530) csaf_redhat
BaseOS-8.1.0.Z.E4S:libksba-0:1.3.5-9.el8_1.i686 libksba-0:1.3.5-9.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1) fixed libksba-0:1.3.5-9.el8_1.i686 vendor fix → libksba-0:1.3.5-9.el8_1.i686 (RHSA-2023:0593) csaf_redhat
BaseOS-8.1.0.Z.E4S:libksba-0:1.3.5-9.el8_1.ppc64le libksba-0:1.3.5-9.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1) fixed libksba-0:1.3.5-9.el8_1.ppc64le vendor fix → libksba-0:1.3.5-9.el8_1.ppc64le (RHSA-2023:0593) csaf_redhat
BaseOS-8.1.0.Z.E4S:libksba-0:1.3.5-9.el8_1.src libksba-0:1.3.5-9.el8_1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1) fixed libksba-0:1.3.5-9.el8_1.src vendor fix → libksba-0:1.3.5-9.el8_1.src (RHSA-2023:0593) csaf_redhat
BaseOS-8.1.0.Z.E4S:libksba-0:1.3.5-9.el8_1.x86_64 libksba-0:1.3.5-9.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.1) fixed libksba-0:1.3.5-9.el8_1.x86_64 vendor fix → libksba-0:1.3.5-9.el8_1.x86_64 (RHSA-2023:0593) csaf_redhat
BaseOS-8.2.0.Z.AUS:libksba-0:1.3.5-9.el8_2.i686 libksba-0:1.3.5-9.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.i686 vendor fix → libksba-0:1.3.5-9.el8_2.i686 (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.E4S:libksba-0:1.3.5-9.el8_2.i686 libksba-0:1.3.5-9.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.i686 vendor fix → libksba-0:1.3.5-9.el8_2.i686 (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.TUS:libksba-0:1.3.5-9.el8_2.i686 libksba-0:1.3.5-9.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.i686 vendor fix → libksba-0:1.3.5-9.el8_2.i686 (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.E4S:libksba-0:1.3.5-9.el8_2.ppc64le libksba-0:1.3.5-9.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.ppc64le vendor fix → libksba-0:1.3.5-9.el8_2.ppc64le (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.AUS:libksba-0:1.3.5-9.el8_2.src libksba-0:1.3.5-9.el8_2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.src vendor fix → libksba-0:1.3.5-9.el8_2.src (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.E4S:libksba-0:1.3.5-9.el8_2.src libksba-0:1.3.5-9.el8_2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.src vendor fix → libksba-0:1.3.5-9.el8_2.src (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.TUS:libksba-0:1.3.5-9.el8_2.src libksba-0:1.3.5-9.el8_2.src as a component of Red Hat Enterprise Linux BaseOS TUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.src vendor fix → libksba-0:1.3.5-9.el8_2.src (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.AUS:libksba-0:1.3.5-9.el8_2.x86_64 libksba-0:1.3.5-9.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.x86_64 vendor fix → libksba-0:1.3.5-9.el8_2.x86_64 (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.E4S:libksba-0:1.3.5-9.el8_2.x86_64 libksba-0:1.3.5-9.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.x86_64 vendor fix → libksba-0:1.3.5-9.el8_2.x86_64 (RHSA-2023:0592) csaf_redhat
BaseOS-8.2.0.Z.TUS:libksba-0:1.3.5-9.el8_2.x86_64 libksba-0:1.3.5-9.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v. 8.2) fixed libksba-0:1.3.5-9.el8_2.x86_64 vendor fix → libksba-0:1.3.5-9.el8_2.x86_64 (RHSA-2023:0592) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.aarch64 libksba-0:1.3.5-9.el8_4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.aarch64 vendor fix → libksba-0:1.3.5-9.el8_4.aarch64 (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.aarch64 libksba-0:1.3.5-9.el8_4.aarch64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.aarch64 vendor fix → libksba-0:1.3.5-9.el8_4.aarch64 (RHSA-2023:0624) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.i686 libksba-0:1.3.5-9.el8_4.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.i686 vendor fix → libksba-0:1.3.5-9.el8_4.i686 (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.i686 libksba-0:1.3.5-9.el8_4.i686 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.i686 vendor fix → libksba-0:1.3.5-9.el8_4.i686 (RHSA-2023:0624) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.ppc64le libksba-0:1.3.5-9.el8_4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.ppc64le vendor fix → libksba-0:1.3.5-9.el8_4.ppc64le (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.ppc64le libksba-0:1.3.5-9.el8_4.ppc64le as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.ppc64le vendor fix → libksba-0:1.3.5-9.el8_4.ppc64le (RHSA-2023:0624) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.s390x libksba-0:1.3.5-9.el8_4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.s390x vendor fix → libksba-0:1.3.5-9.el8_4.s390x (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.s390x libksba-0:1.3.5-9.el8_4.s390x as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.s390x vendor fix → libksba-0:1.3.5-9.el8_4.s390x (RHSA-2023:0624) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.src libksba-0:1.3.5-9.el8_4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.src vendor fix → libksba-0:1.3.5-9.el8_4.src (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.src libksba-0:1.3.5-9.el8_4.src as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.src vendor fix → libksba-0:1.3.5-9.el8_4.src (RHSA-2023:0624) csaf_redhat
BaseOS-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.x86_64 libksba-0:1.3.5-9.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.x86_64 vendor fix → libksba-0:1.3.5-9.el8_4.x86_64 (RHSA-2023:0624) csaf_redhat
CRB-8.4.0.Z.EUS:libksba-0:1.3.5-9.el8_4.x86_64 libksba-0:1.3.5-9.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4) fixed libksba-0:1.3.5-9.el8_4.x86_64 vendor fix → libksba-0:1.3.5-9.el8_4.x86_64 (RHSA-2023:0624) csaf_redhat
page 1 of 6 next →

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.